Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0bed4c320440c325e8c4c90f590ee9282d5d7204.roa
File:                     0bed4c320440c325e8c4c90f590ee9282d5d7204.roa (raw, json)
Hash identifier:          xb9j3M4HB+W5yrikTGLA/8SALzxdMiaT3gnESGsBJyo=
Subject key identifier:   11:1B:8D:53:C4:6E:B0:82:40:75:92:40:A7:76:47:2D:38:8E:FF:1B
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       10FD70
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0bed4c320440c325e8c4c90f590ee9282d5d7204.roa
Signing time:             Fri 16 Jul 2021 19:32:58 +0000
ROA not before:           Fri 16 Jul 2021 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     28075
IP address blocks:        138.204.0.0/22 maxlen: 22
                          143.202.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113456 (0x10fd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jul 16 03:00:00 2021 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=0bed4c320440c325e8c4c90f590ee9282d5d7204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:ed:10:3c:c8:d9:39:17:0e:9d:12:2b:a5:
                    83:5c:cf:b1:38:41:12:fd:d7:b3:96:6f:0c:0e:37:
                    74:97:bb:da:bc:0c:6c:05:14:f9:27:3c:9b:f2:b6:
                    20:0e:9f:af:8b:9c:6e:64:53:71:0e:3b:fe:bd:b8:
                    aa:85:f7:49:3d:ad:4b:ce:4b:57:46:27:39:91:49:
                    4c:42:a1:ab:a7:05:e6:61:d7:1d:56:41:e2:04:e3:
                    c7:57:0a:22:68:8d:ec:a4:da:f7:b4:ff:4b:4b:55:
                    9b:1e:12:c6:70:70:3c:9c:51:70:ef:fe:59:bc:95:
                    0a:cc:8a:78:de:28:fb:a8:c7:f5:49:a8:ec:45:a2:
                    ab:16:64:ac:b0:8a:c1:89:9a:58:c8:e5:84:8a:f8:
                    55:96:a0:b3:8a:f3:e7:79:79:7d:7b:24:ac:75:36:
                    e3:08:12:37:74:d5:3e:ca:6c:85:43:03:f4:24:d2:
                    5f:b5:ef:27:1b:7f:f9:8a:34:41:70:e5:ab:bd:96:
                    25:b6:34:8c:67:8f:af:ca:3d:31:10:90:00:bc:8b:
                    88:ae:37:d8:c6:4a:ce:7f:12:a2:ae:8e:c6:9c:8f:
                    a2:f9:bb:c1:6d:b3:44:68:f8:b5:cc:b4:a0:06:d7:
                    f8:f1:38:bc:f9:72:54:ac:3d:20:b8:d6:93:42:95:
                    60:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1B:8D:53:C4:6E:B0:82:40:75:92:40:A7:76:47:2D:38:8E:FF:1B
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/0bed4c320440c325e8c4c90f590ee9282d5d7204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.0.0/22
                  143.202.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:59:03:f6:f1:43:1b:b6:a8:f0:fe:6b:46:ba:b7:3b:60:9e:
         6f:f8:cc:a1:b5:86:49:9c:e5:59:c5:56:f9:95:76:63:2d:ca:
         4e:54:e2:02:dc:37:c2:a9:80:17:ad:54:00:0f:20:c3:b9:b4:
         4c:b6:b5:07:e5:09:ee:73:33:46:5b:f7:46:3f:d1:98:75:29:
         f0:ac:ca:37:d1:73:82:19:fa:8f:08:c3:74:fc:c5:6b:e4:8d:
         83:1b:bd:28:32:45:6f:55:46:8a:3e:0b:dc:a1:cc:53:dd:d6:
         29:da:f3:ac:de:5d:23:42:20:52:9c:3f:21:0d:39:ba:da:aa:
         82:4a:a0:a1:03:c7:6d:38:fd:c2:ba:7c:f7:96:a1:4b:71:dc:
         e2:8d:27:e5:63:79:e0:a8:fb:92:c7:59:47:d7:76:e9:f6:b2:
         b8:61:8c:0d:a9:a7:fc:d7:58:28:58:1e:41:28:73:a7:d3:bc:
         c3:e2:ac:b3:15:3d:41:fa:a3:24:21:8d:19:41:f0:22:08:e9:
         37:15:36:6b:c9:3c:8a:ab:5e:74:d9:ea:d7:4c:01:d9:3d:a7:
         25:51:c3:78:5b:60:52:0a:cc:4f:19:64:a9:ed:8c:02:5d:e0:
         da:7a:f2:1f:fc:37:2e:03:be:1d:d6:da:72:bc:42:cb:1f:ac:
         77:b4:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:58 2023 by rpki-client on console-ams.rpki-client.org